RISK PROCESS & PROJECTS

Trigger

Prioritize and implement improvement

Documented internal control

Monitor/identify threats/improvements• I

dentify improvements and possible loss scenarios• S

ources are incidents, Observations(lyspæra), Audits, internal control aligned with strategic objectives, gap analysis

Prioritize possible improvements• D

efine scenarios for what will/may happen if nothing is changed/improved

Nominate good ROI improvement• P

ossible improvement weighed against cost yields an ROI

Implement improvements• P

rioritize and implement projects

Ensure sustainable improvement• E

nsure that improvement maintenance responsibility is documented

Project management

Handover to operations

Project gatekeeper

Risk & Improvement rating/importance

Improvement identification and monitoring

Manage current status(risks)Emergency preparedness• Manage current risk until improvements are implemented• Ensure communication plans are updated to manage risks

Business continuity• Quick fix train personnel to manage scenario• Update business continuity plans

Compliance Management

Risk & Opportunity Management

Remedial action and plans (Reporting)

Compliance Status

Compliance Contract

--- Compliance SurveyEmergency

prepeardness and continuity

Manage rest riskKPIs

Internal Control

Internal control

Leader Approval and improvement focus

Internal & quick fix

Perceived consequence of not doing any thing

Pro

babi

lity

of c

onse

quen

ce